19 matches found
CVE-2025-26042
Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...
CVE-2025-26042
creationtimestamp| type| source ---|---|--- 2025-03-17 21:39:28+00:00| seen| https://t.me/cvedetector/20503 2025-03-17 22:01:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkm5q7magi26 2025-03-31 16:12:53+00:00| published-proof-of-concept|...
CVE-2025-26042
Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...
CVE-2025-26042
Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...
CVE-2024-26042
creationtimestamp| type| source ---|---|--- 2024-03-18 19:27:23+00:00| seen| https://t.me/ctinow/210880...
CVE-2024-26042
CVE-2024-26042 affects Adobe Experience Manager (AEM) versions
CVE-2024-26042 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...
CVE-2023-26042
creationtimestamp| type| source ---|---|--- 2023-02-27 18:28:00+00:00| seen| https://t.me/cibsecurity/58956...
CVE-2023-26042
Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to...
CVE-2023-26042 HTML/XSS injection possibilities in Part-DB
Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to...
CVE-2023-26042 HTML/XSS injection possibilities in Part-DB
Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to...
CVE-2023-26042 HTML/XSS injection possibilities in Part-DB
Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to...
CVE-2023-26042
CVE-2023-26042 affects Part-DB, an open-source inventory management system for electronic components. The root issue is improper escaping of user input, enabling HTML/XSS injection into pages. The CSP blocks inline and external scripts, limiting exploitability to combinations with other vulnerabi...
CVE-2022-26042
An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...
CVE-2022-26042
InRouter302 (InHand) with firmware 3.5.4 has an OS command-injection in the daretools binary. TALOS-2022-1478 shows the HTTP server and a debug inhand function enabling a user with a hard-coded password to run the daretools binary, which then accepts lines; if a line starts with a or r, it calls ...
CVE-2021-26042
CVE-2021-26042 is rejected/not used and does not represent an active vulnerability.
Hoosk CMS SQL Injection (CVE-2020-26042)
An SQL injection vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...